Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/kjrsCTGOAYkDn031cP83bxdAmNo.roa
File: kjrsCTGOAYkDn031cP83bxdAmNo.roa (raw, json)
Hash identifier: +k+LlXpFE6JZ4QfE9THspkMkeyIPy/kkJ3si0tO/m8g=
Subject key identifier: 92:3A:EC:09:31:8E:01:89:03:9F:4D:F5:70:FF:37:6F:17:40:98:DA
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 01856DC1EB29B62E83D01A68EBCBB311FE9C
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/kjrsCTGOAYkDn031cP83bxdAmNo.roa
Signing time: Sun 01 Jan 2023 14:35:03 +0000
ROA not before: Sun 01 Jan 2023 14:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199249
IP address blocks: 2001:67c:12bc::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:eb:29:b6:2e:83:d0:1a:68:eb:cb:b3:11:fe:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Jan 1 14:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=923aec09318e0189039f4df570ff376f174098da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:e6:37:9c:ca:ba:72:b8:63:31:f4:bf:e0:
74:26:84:2f:8d:17:67:3d:d1:de:91:db:23:40:b4:
56:d1:db:a2:4c:62:27:b0:b8:48:09:3d:d3:a6:ac:
a1:af:44:b3:3d:86:86:c4:c8:f9:e2:95:b9:6a:8d:
d4:4e:9e:63:e5:b3:3f:99:96:8c:b0:8e:ea:fb:8f:
29:b1:a3:20:45:3b:b2:17:3c:24:01:d2:3c:5d:6d:
94:7a:d1:5f:b7:e8:80:4d:93:ee:ba:93:12:a8:d9:
44:29:cb:59:b7:13:93:05:dd:72:c3:30:57:3c:a8:
31:24:95:c1:a9:1a:00:7c:f1:02:2b:03:84:d7:3c:
8f:dd:d0:49:f0:07:92:a1:e9:87:b1:87:92:aa:a2:
30:67:ae:67:4f:1b:88:ea:06:9c:69:c2:c1:e1:04:
f9:d7:55:3c:30:eb:b4:70:58:b7:d4:7f:96:0d:e4:
85:9b:4b:8a:b8:7e:ba:dc:09:2a:25:dd:ac:f3:87:
72:b2:af:ee:b0:57:bf:b7:37:a2:58:2e:9e:07:fb:
83:54:80:58:81:7f:75:f0:f8:93:f1:6d:5a:10:14:
99:d8:db:e3:07:28:fd:4a:90:a4:28:55:8c:6f:83:
2b:50:b1:2c:94:98:7b:9e:4b:bb:aa:b5:bb:9b:f3:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3A:EC:09:31:8E:01:89:03:9F:4D:F5:70:FF:37:6F:17:40:98:DA
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/kjrsCTGOAYkDn031cP83bxdAmNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12bc::/48
Signature Algorithm: sha256WithRSAEncryption
63:32:fd:e6:f6:13:84:97:f3:56:58:94:92:76:eb:bc:59:e9:
30:5d:6a:70:32:db:3e:44:40:00:29:8c:cc:33:6e:8f:e6:c2:
fb:48:a3:9a:e3:50:f0:08:30:07:6a:3e:07:f3:b7:b4:86:36:
cd:72:ad:fb:d6:68:ab:46:e4:80:4d:a4:f1:7a:30:66:5f:c5:
9c:9f:03:17:79:e4:ac:d6:1a:b6:a7:4e:17:88:38:9a:7f:11:
4c:62:bc:70:0b:50:0a:a1:06:bb:18:18:97:25:8f:e9:d6:9d:
eb:f5:70:26:c1:9c:b9:cb:f0:a0:35:78:13:e2:df:d0:65:21:
17:e4:7f:bf:d5:0c:9f:69:22:96:3e:4a:76:cd:65:78:cd:3d:
c3:b7:5c:91:d6:6e:c9:9f:6d:43:fe:ac:f5:8a:0a:d1:3c:3f:
a7:7d:74:72:43:97:a4:4d:3c:0a:bd:9f:6e:9b:f1:b2:f5:37:
20:56:59:33:06:9b:35:83:ea:15:40:02:74:d4:fa:34:5c:42:
d0:b1:21:b3:56:ec:0b:18:a1:8f:28:b7:95:1f:14:46:43:58:
95:44:5a:16:73:11:ca:fd:92:0d:31:1b:79:47:b3:70:50:cc:
c1:8c:d6:48:d6:24:c8:4c:19:32:eb:75:49:bf:22:d2:cc:44:
35:20:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:26 2024 by rpki-client on console-fra.rpki-client.org